RansomHouse on the Move Again: Hirsh Industries Latest Target - #8Base
The 8Base and RansomHouse ransomware groups have been actively targeting organizations across various sectors, employing new tactics and tools to evade detection and maximize impact. 8Base has incorporated a new variant of the Phobos ransomware, which includes features for persistence, speedy encryption, and backup deletion. RansomHouse has developed the 'MrAgent' tool to automate ransomware deployment across VMware ESXi hypervisors, compromising virtual machines simultaneously. Both groups utilize double extortion tactics, threatening to leak stolen data if ransom demands are not met. Their recent targets include lingerie brands, banks, manufacturers, and universities across multiple countries.